As a system owner, you are planning for the recovery of a core system to support business continuity. Which of the following is not a recovery objective specific to your system? (Wentz QOTD)
A. Recovery Point Objective (RPO)
B. Recovery Time Objective (RTO)
C. Service Delivery Objective (SDO)
D. Maximum Tolerable Downtime (MTD)

Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

My suggested answer is D. Maximum Tolerable Downtime (MTD).

Maximum Tolerable Downtime or MTD specifies the maximum period of time that a given business process can be inoperative before the organization’s survival is at risk.”

Source: BCM Institute

The Maximum Tolerable Downtime (MTD) is a constraint of critical business processes supported by information systems and other resources. In other words, MTD imposes constraints on one or more information systems as the following diagram shows.

Maximum Tolerable Downtime (MTD) is a business constraint or requirement that drives objective setting. Service Delivery Objective (SDO), Recovery Point Objective (RPO), and Recovery Time Objective (RTO) are objectives as the term “objective” is explicitly denotes literally. Please refer to this post, Common BIA Terminologies, for details.

Reference

• Common BIA Terminologies
• CISSP PRACTICE QUESTIONS – 20200406
• CISSP PRACTICE QUESTIONS – 20201217
• CISSP PRACTICE QUESTIONS – 20200407
• CISSP PRACTICE QUESTIONS – 20210215
• CISSP PRACTICE QUESTIONS – 20210116

A BLUEPRINT FOR YOUR SUCCESS IN CISSP

My new book, The Effective CISSP: Security and Risk Management, helps CISSP aspirants build a solid conceptual security model. It is not only a tutorial for information security but also a study guide for the CISSP exam and an informative reference for security professionals.

• It is available on Amazon.
• Readers from countries or regions not supported by Amazon can get your copy from the author’s web site.

作為系統所有者，您正在撰寫恢復核心系統以支持業務連續性的計畫書。 以下哪項不是您系統特定的恢復目標？
A. Recovery point objective (RPO)
B. Recovery Time Objective (RTO)
C. Service Delivery Objective (SDO)
D. Maximum Tolerable Downtime (MTD)